Tonis Tiigi 7cf63df2a7 source: extract SafeFileName into shared pathutil package ...

Move safeFileName from source/http to source/util/pathutil
and apply it to the containerblob source as well. Harden
containerblob/pull.go to use os.OpenRoot for file writes,
preventing path traversal via crafted filenames.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 3d6e587655d72c343f6fdc7268480a900ba45b0c)

2026-03-25 08:14:30 -07:00

..

containerblob

source: extract SafeFileName into shared pathutil package

2026-03-25 08:14:30 -07:00

containerimage

containerimage: add resolve attestation support

2026-02-09 15:27:33 -08:00

git

source/git: checkout before submodule update

2026-03-11 13:07:40 -04:00

http

source: extract SafeFileName into shared pathutil package

2026-03-25 08:14:30 -07:00

local

solver: add cleanup function to jobctx and pass through sources

2025-10-13 17:39:53 -07:00

types

source: update imageblob to new docker-image+blob and ref_type naming

2026-02-24 08:05:42 -08:00

util/pathutil

source: extract SafeFileName into shared pathutil package

2026-03-25 08:14:30 -07:00

identifier.go

source: make sources pluggable

2023-08-16 09:57:55 +01:00

manager.go

solver: add cleanup function to jobctx and pass through sources

2025-10-13 17:39:53 -07:00